#jeremycherfasSo now to decide whether and how to switch over to use Xray rather than wrestle with the very variable results returned from the native plugin’s use of php-mf2
#LoqiZegnat: jeremycherfas left you a message 8 minutes ago: I have solved the local testing of the grav webmention plugin, by specifying the route as /grav-admin/mentions/
[pfefferle] joined the channel
#ZegnatXRay has easier to handle output for sure. php-mf2 is just more stuff that you still have to write your own handling code for
#jeremycherfasIn webmention.yaml. Easier to add there than work out why the base_url() function wasn’t doing it. Although the answer to that might be to use base_url_absolute
#jeremycherfas“The {{ base_url_absolute }} returns the base URL to the Grav site, including the host information.” from the documentation
#jeremycherfas“The {{ base_url }} returns the base URL to the Grav site, whether or not this shows the full URL is dependent on the absolute_urls option in the system configuration.”
#jeremycherfasZegnat: Yes, that’s where I began, with wanting the standard simpler output that xray can provide.
j12t joined the channel
#ZegnatOh, interesting jeremycherfas! So is /grav-admin/ included on base_url_absolute for you?
#ZegnatOh, no, those shouldn’t make a difference. base_url_absolute will just always include the schema and domain (http://example.org/) while base_url will default to the relative URL unless you turn on absolute urls in your config file :(
#jeremycherfasI didn’t try changing the PHP, because changing the yaml was easier and it worked.
#ZegnatYeah, should be fine :) Just remember that you should change it back for your live site
#ZegnatYou are seeing webmentions coming in now between the offline sites? Then it is time to focus on getting XRay in :D
#jeremycherfasYes, I am seeing webmentions received from local Known to local Grav. Next I will text send from Grav to Known.
#jeremycherfasAlthough that will mean tracing back the differences between the current 1.1.0 of the plugin and the version I worked with in Nurnberg with aaron.
#sebselbut /users/self/media/recent works, so I guess they see other people's likes as other peoples property, because they posted it, and your likes also other people's property, because it's their photo.
#snarfedyup. if you're open source/hobbyist, ie not BizDev/Brand, don't expect to be able to use IG's API for much of anything at all any more
#[miklb]huh. If I add Quill to my home screen I can’t authenticate with indieauth, but can in Safari iOS. Doesn’t redirect back to the home screen app.
#aaronpkhm yeah i don't think iOS will work that way
#aaronpkunless there is some iOS trick I don't know about
#aaronpkbut there's an "add to home screen" button inside of quill
#aaronpkwhich adds a shortcut with an autologin token to your home screen
#Loqi[indieweb] mention-client-php: Client library for sending webmention and pingback notifications
#sknebelaaronpk: extending self-auth should be fairly easy still. what for? ;)
#aaronpkgoogle has probably the most secure account protection stuff out of anyone, so i was thinking about making an indieauth authorization endpoint that piggybacks on that
#aaronpkand then realized that selfauth has already done all the indieauth bits in a very good way, so it makes sense to use that
#sknebelit might make sense to try structure selfauth in a way that the actual authentication method can be easily swapped out
#sknebelsince you are not the first to ask about things like this ;)
#tantekdoes Bridgy enable blocking particular twitter profiles from backfeed?
#aaronpkhm bridgy uses your twitter api credentials when fetching posts, right? so if you block something on twitter then it should also affect bridgy
#Loqi[kylewm] #473 Twitter: do not backfeed from blocked accounts
deep-book-gk_ joined the channel
#loqi.meedited /User:Kaja.sknebel.net (+129) "sknebel added "use selfauth instead of custom, DB-based auth endpoint? (with shared secret it'd be easy to generate the correct signed token)" to "See Also"" (view diff)
#Loqi[tantek] This is currently a blocker (no pun intended) for me implementing showing any kinds of comments (including from Bridgy via Twitter), and likely even reposts/likes (because I'd really like to avoid having a direct link from my site/permalinks, even in...
#ZegnatThat would be interesting to do aaronpk. Because of the 1 file system it isn’t super easy to swap just the password form. The password validation on the otherhand is already a nice separate function that you can swap out.
#sknebelZegnat: yeah, we'd have to pull more stuff into functions, or at least define a structure we stick to to make it easy to define patches. Or use a class you can derive from to allow overriding parts?
#aaronpkooh a class to be able to override parts sounds like a good approach?
#dgoldaaronpk: webmention-client-php; can I pass an url & content directly through the client, or is it dependent on parsing the outputted html?
#Loqi[kylewm] #473 Twitter: do not backfeed from blocked accounts
#voxpellischmarty: webmentions endpoints and indie readers are likely consumers
#schmartysnarfed: since bridgy is already using twitter APIs I would assume the quickest way to check if a twitter user is blocked is to keep using those twitter APIs?
#voxpellirealizes the time is late in Europe and postpones to another day
#voxpelliFirst step for my webmention endpoint would be to start doing indieauth anyway, so dogfooding is past that in the future
#tantekI think minimum viable blocking for Bridgy should be to "just" automatically filter out anything that the user has blocked on the silo. that should "just work" without any reconfiguration, and I think that's what issue 473 is about but I'm not sure from having read it (discussion is much broader)
#tantekthen there is minimum viable response deleting which is a bit different, and probably something webmention proxies need to implement (not Bridgy)
#snarfedtantek: right, i think that's the big remaining todo
#tantekthis is the plumbing/service equivalent of when you (as an author of a post) delete comments on your post
#tantekonly on FB can they not @-mention you AFAIK
#tantekor rather, on FB if you block someone, they cannot @-mention you
#snarfedright, that's the one remaining thing. but supporting homepage webmentions is very rare, so i think we can deprioritize that part of block filtering a bit
#snarfedtantek: e.g. i assume you'll implement rendering responses on posts way before on your homepage, right?
#tantekand I'm happy to be the canary in the coalmine for this
#tantekif we want anyone other than highly privileged classes of folks using indieweb tools / ecosystem / techniques (POSSE & backfeed), we MUST solve block etc.
#tantekthe twitter use-case should be handled automatically by bridgy backfeed without *any* need for an explicitly published list anywhere
#voxpelliI can agree with Tantek here, dogfooding blocking with only data from Twitter to dog food with doesn't result in any good dogfooding
#aaronpkyeah there's definitely something bridgy can do without any new format or trying to share any of these block lists
#aaronpkstays out of this discussion until it becomes relevant to webmention.io
#snarfed...just to confirm, do we all agree that bridgy backfeed already seems to handle twitter block lists, *except* @-mentions, which are maybe not top priority since homepage wm support is so rare...right?
#aaronpkhas anyone actually confirmed that bridgy doesn't send webmentions from blocked accounts? I assume that would be the case if the twitter API works like I expect, but not totally sure
#snarfedok. i understand, and it's technically possible, but realistically i highly doubt i'd ever implement that
#snarfedi understand flickr may do it, but they own the storage, which makes it way easier
#tanteksnarfed, Bridgy owns the storage of Bridgy permalinks
#aaronpkyeah saying flickr does that is not quite fair
#snarfedyes. again, i understand, and it's doable, but very unlikely that i'll actually implement it
#tantekand I'm saying it is going to be (is) a user expectation of how block works
#aaronpkany time you try to recreate a silo feature in a distributed context it's going to be much harder, so it's not fair to say "silo X does this, so it should be easy for indieweb site/app Y"
#tantekon Flickr, you can block someone to remove *all* their responses/interactions from your photos
#voxpelliWith block list at receiver it would be no issue, with block list at sender it could result in thousands of pings from a single block
#snarfedyeah. silo backfeed is already clearly incomplete and lower fidelity in a number of ways. given that, i'm not entirely convinced that users will expect every action inside a silo to seamlessly work and propagage correctly into their site.
#aaronpkyeah i think i'm more likely to implement blocking at the receiver end. i see why snarfed has no interest in implementing that in bridgy
#aaronpkwebmention.io being one of the receivers. so if i can get the information that someone blocked an account, I'd happily wriite something that deletes all the webmentions from the database
#tanteksnarfed, I'm not talking about "users will expect every action inside a silo to seamlessly work and propagage correctly", I'm talking about users will experience pain (abuse) and want it to go away as quickly / easily as possible
#tantekand one of those is abusive responses showing up on their own site via Bridgy
#voxpelliaaronpk: or probably rather just marks it as ignored, as a block can always be unblocked
#tanteksince we know Twitter is a cesspool of abuse, this is inevitable
#aaronpkblocks one of his own accounts and hopes this doesn't trigger something bad
#snarfedtantek: understood! it's definitely a noble goal. it's just also a substantial project, and requires bridgy to scale on at least a couple dimensions that it doesn't now.
#tantekI expect, to everyone, but certainly to less privileged individuals first
#tanteksnarfed, in that case, it may be worth setting those expectations up front
#snarfedhonestly i'd like to see the native indie version of this retroactive block behavior diagrammed out and prototyped in at least one CMS first
#ZegnatIf snarfed has a webmention page that mentions multiple people he can’t 410 it just because one of the people has the sender blocked though.
#aaronpkalso that requires that webmention receivers know how to interpret the http 410 and can handle a sudden flood of incoming webmentions lol
#tantekand then that makes the persistent-delete-webmention more important
#snarfedtantek: sure! in practice, i expect that surprise doesn't really happen now (yet), since almost no one supports homepage wms...but still, understood
#jjuranaaronpk: You can remove people, but you have to click on a thing to do it.
#voxpellisnarfed: retroactive block by 410 would only be a solution for solo -> indie, not for indie -> indie
#Zegnataaronpk: a homepage mention from a tweet “Hi @aaronpk @t love you guys” I would expect to get 1 page on bridgey but mention both? Not sure how much support Bridgy has for that
#aaronpkZegnat: i think bridgy creates two URLs for that? (correct me if i'm wrong)
#snarfedyup. native indie blocking is either entirely inside the receiving CMS, or btw CMS and wm.io (etc)
#Loqi[snarfed] hey @aaronpk, would you consider consuming mf2 blocklists as a way to implement this filtering? if so, i'm happy to prioritize snarfed/granary#40.
#aaronpk:sigh: i sent a webmention for the blocked post from the bridgy URL thanks to my twitter search script
#aaronpkdeleted that, trying to trigger brigdy poll now
#voxpellisnarfed: aaronpk: keep me in the loop if you work on any of that, would very much want to get something like that working before KevinMarks mentions GamerGate or something again :)
#tantekvoxpelli: interesting question, perhaps there's another way to trigger this
#aaronpki think bridgy is sending the webmention anyway
#tantekwell, in that scenario, who is the author of the delete?
#voxpelliI don't think it's a delete as much as an ignore
#aaronpkeh, i'm not sure i'd say i created anything by doing that
snarfed joined the channel
#tantekaaronpk: in short, you are the author of the delete, and your delete is a response to the comment you are deleting on your post.
#ZegnatI’d say that is literally deleting the local copy of the comment. I wouldn’t see that as a response per se.
#tantekZegnat: "local copy" is something you can't conclude from that because that's a plumbing detail
#aaronpkalso if i'm deleting a comment, i probably don't want to keep anything around that shows i deleted it
#voxpelli(And actually, our "block" is probably more a "mute" than a "block" in the Twitter sense as a "block" is to stop others from reading your stuff)
#tantekand certainly ambiguous on silo vs federated
#tantekvoxpelli: absolutely not. we have /block and /mute as very distinct
#ZegnatSo what would a delete response say tantek? “I received your comment, then I removed it from displaying on my end”?
#tantekthere is no "our 'block'" unless you can point to someone's implementation
#voxpelliBut in the Twitter sense, we never block anyone from reading our stuff? Or should a block list also apply to eg a webmention sender?
#tantekZegnat, there's the webmention a delete response would send, and there's what would a delete response look like in markup.
#tantekvoxpelli: Twitter is a poor implementer of block, bad to use that as example
#Zegnatno, that is plumbing, as you always say, tantek ;) What would you mean by that response?
#ZegnatNo. What are you trying to tell the recipient with that, was what I meant. A webmention from an in-reply-to would say “I replied to you on this page”. So what would a delete response say?
#aaronpkif you block an account in webmention.io, should it continue to process and store future webmentions from that account in case you unblock the account later?
#aaronpkor should blocking the account make it ignore future webmentions from that account?
#aaronpkand if you unblock it later you don't suddenly see a bunch of new webmentions
#Loqi[aaronpk] Step one for me in webmention.io would be adding a way to have block lists internally at all. I'd start by implementing a minimal UI for managing which things are blocked, similar to how this works on Twitter. Then I could definitely see syncing that...
#aaronpkneeds to do some cleanup on webmention.io before he starts adding new features
#tantekthere's a big difference between deleting things with permalinks (and ignoring future webmentions from them), and ignoring *everything* from a particular domain/source/author
#tantekon my site, visually when I see something abusive (like a bad/garbage comment), I would have a close box / trashcan etc. UI to delete that abusive response
#tantekthen upon clicking that, my site would generate a capability URL that doesn't show up anywhere else, that has a delete response in-reply-to (or delete-of?) the permalink of the abusive response I'm deleting
#tantekand then it would send a webmention to where I got the abusive response from, e.g. Bridgy backfeed
#tantekBridgy upon receiving it, could/would realize hey I got a delete response from the original post, I should remove / 410 my copy of the backfeed
#tantekthis is basically an alternative to moderation, wherein people have to approve every comment
#aaronpkdoes this still make sense to send to other indieweb sites?
#aaronpki have a bunch of responses i'd like to delete too
#tantekI want to remove some of them (from spam/bot/pr0n accounts)
#aaronpkhm also i have some responses i want to re-parse
#aaronpksince i've improved my comment handling since originally receiving the comment
#tantekuse-case: a family member is reading my public post, sees the facepile of people liking it, sees an "interesting" avatar/icon in the facepile, clicks it, and sees a BUNCH of ugly things
#tantekI'm just going to say point blank that this is *essential* to go beyond gen 1/2
#ZegnatAlso note that in some countries you might be responsible for what you link to. I believe Germany has something weird about that. Though for those countries I would just advise moderation queues.
#ZegnatSuch example links might be better to just remember to put in chat. If you *must* share them. Or share them by another temp page, e.g. I have shared a FB page I did not want to have the URL logged from by putting the URL on my wiki and then giving the URL to my wiki.
#snarfedso users can expect bridgy to seamlessly support their silo block lists, but realistically it still won't for the majority of silos
#snarfedtantek: i couldn't find it when i searched their API docs in 9/2015. details and links in that issue. i'd love to find out it does though!
#snarfedon the plus side, unlike twitter, the other silos' APIs are all sane and let me get a post's comments directly, so there's a good chance they filter by block lists themselves
#tanteksnarfed, huh, odd about that in the API - I'll hunt a bit. thought for sure it was there - since it's so well exposed in their UI around contacts
#snarfedyeah UI sometimes but definitely not always implies API
#tantekagreed. though knowing a bit about how they built Flickr, that's why I'm surprised.
#tantekI bet it's there and "just" a documentation issue
#snarfedpls do post on the issue if you find that's true!
tbbrown, tantek, dougbeal|mb1, sebboh` and [miklb] joined the channel
#tantekno luck snarfed, I can't find it after some digging. odd.